Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3231342e302f32332d3233203d3e203533303534.roa
File:                     3138372e37332e3231342e302f32332d3233203d3e203533303534.roa (raw, json)
Hash identifier:          rUE00YYxcdesWynRis4iH/VX++lYONXU63+MFza8uqk=
Subject key identifier:   9B:0B:3A:E3:BE:6E:B8:43:4F:28:1D:19:30:7B:B8:2A:E0:79:85:B2
Certificate issuer:       /CN=FECB959E21E756261292E2137CDE9CAD85492B0A
Certificate serial:       45F772CAEAEC07AF881AB1BF3C8CEF99E3614A19
Authority key identifier: FE:CB:95:9E:21:E7:56:26:12:92:E2:13:7C:DE:9C:AD:85:49:2B:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FECB959E21E756261292E2137CDE9CAD85492B0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3231342e302f32332d3233203d3e203533303534.roa
Signing time:             Mon 09 Sep 2024 15:06:02 +0000
ROA not before:           Mon 09 Sep 2024 15:01:02 +0000
ROA not after:            Mon 08 Sep 2025 15:06:02 +0000
asID:                     53054
IP address blocks:        187.73.214.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/FECB959E21E756261292E2137CDE9CAD85492B0A.crl
                          rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/FECB959E21E756261292E2137CDE9CAD85492B0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FECB959E21E756261292E2137CDE9CAD85492B0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f7:72:ca:ea:ec:07:af:88:1a:b1:bf:3c:8c:ef:99:e3:61:4a:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FECB959E21E756261292E2137CDE9CAD85492B0A
        Validity
            Not Before: Sep  9 15:01:02 2024 GMT
            Not After : Sep  8 15:06:02 2025 GMT
        Subject: CN=9B0B3AE3BE6EB8434F281D19307BB82AE07985B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a9:a3:53:79:bf:87:bf:de:5f:09:da:61:f4:
                    5b:52:6a:fa:19:00:ae:1d:be:27:f5:70:08:37:34:
                    a6:a9:b7:f4:61:22:16:90:df:db:2c:d8:e6:bd:d6:
                    be:25:f8:0a:e6:4a:5a:71:06:cd:45:c2:66:e5:2d:
                    fc:f0:b6:91:44:f5:72:8e:dd:26:d6:ca:14:62:06:
                    54:2d:2a:9f:9a:ba:7e:36:b2:96:cb:e9:75:c8:68:
                    e7:bf:91:0e:57:5c:47:84:87:cb:31:58:56:75:58:
                    df:99:bb:fe:c4:7f:45:7b:2c:95:73:1e:58:2d:13:
                    d5:47:82:c0:38:6a:72:fa:a8:02:6a:65:4c:c3:4e:
                    20:7d:7b:82:82:03:a3:8f:93:b5:ee:ae:96:87:5e:
                    65:0c:0c:69:54:2a:96:85:04:4c:0a:ae:93:0e:86:
                    5e:61:68:9b:7e:30:28:cd:eb:8a:28:fd:a0:83:ac:
                    c1:10:6a:26:03:3f:24:93:f0:0e:05:e9:fa:6f:f5:
                    9c:35:f6:a7:05:3a:cc:b6:36:72:47:e5:e7:38:79:
                    58:28:26:c5:11:e1:0f:4c:0e:ff:90:b9:ad:c1:d4:
                    be:35:dd:3d:8b:30:e9:53:b9:8c:22:5d:74:70:9f:
                    60:b4:ac:a2:04:3a:78:d2:e1:a3:f6:a5:bc:1f:31:
                    60:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0B:3A:E3:BE:6E:B8:43:4F:28:1D:19:30:7B:B8:2A:E0:79:85:B2
            X509v3 Authority Key Identifier:
                keyid:FE:CB:95:9E:21:E7:56:26:12:92:E2:13:7C:DE:9C:AD:85:49:2B:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/FECB959E21E756261292E2137CDE9CAD85492B0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FECB959E21E756261292E2137CDE9CAD85492B0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3231342e302f32332d3233203d3e203533303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:4a:00:b8:3b:27:36:ce:4a:2c:7a:f7:42:b9:7a:06:23:4f:
         84:a1:4d:e4:0d:9e:87:69:55:2a:9b:17:f4:92:a8:f2:3d:2f:
         79:0e:81:24:33:af:44:5b:ef:e6:f5:b4:70:de:44:3f:3f:e5:
         29:4f:ca:b7:35:d9:d5:6c:0f:19:cc:bf:41:a8:13:a2:63:4b:
         ba:ee:9c:1d:f8:ba:ad:85:bd:f8:3c:c9:3a:1a:88:2a:32:77:
         fc:87:b4:ce:74:d9:66:a2:85:44:6a:61:ff:25:6b:b9:00:b8:
         3d:18:7a:da:f0:38:0c:47:02:1c:0b:e9:24:1b:9d:9a:31:b7:
         c0:f2:2a:25:09:5f:41:7b:71:06:94:3d:9b:b6:5b:c8:03:62:
         d0:b0:4f:2a:bc:70:d6:46:76:4f:87:e8:c8:8c:d0:05:2e:6a:
         54:28:60:d0:e7:9f:63:04:a3:4a:11:49:bd:82:d1:7c:83:b2:
         b7:1c:df:84:5f:c9:47:5b:ee:23:1d:95:1a:3e:24:13:ea:38:
         ca:37:61:c1:18:78:ee:e7:f6:ba:53:81:ab:fb:fc:6a:92:88:
         35:f4:57:99:6f:cc:ed:f9:60:c6:9e:64:ec:b6:54:f3:d7:f8:
         0d:46:fb:c3:34:17:78:e8:9e:e1:66:c3:44:9e:bd:6f:e2:b3:
         e5:da:df:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:26:50 2024 by rpki-client on console-ams.rpki-client.org